SAP security note 1637102, "SAP NW CE BPM: Detect LeftOver Debug Code". Below are the symptom and SAP recommended solution.
Description
Symptom
Details about the programmatic structure of certain parts of BPEM-CORE and technical error details can be exposed improperly. This information may assist an attacker in targeting other software components associated with NetWeaver BPM.
Solution
To address this issue, apply the appropriate patch that matches your support package version as outlined in the support package patch table below. Follow the instructions provided in the SAP NetWeaver Support Package Stack Guide to ensure correct application.
Full note on SAP: SAP Support Launchpad note 1637102
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].